UBUday Bhaleinhackwithrudraub.hashnode.dev·5d ago · 7 min readPart 3: From Admin Panel to Remote Code ExecutionWe made it. After chaining IDOR → Information Disclosure → Weak Password Reset → Administrator Access, we finally reached the admin dashboard. But administrator access isn't the end of the attack. It'00
DIDaniel Isaac Eindanielisaace.hashnode.dev·Aug 15 · 9 min readThe Endpoint Wasn't Vulnerable. The Attack Chain Was.Introduction The first finding wasn't critical. It wasn't even particularly interesting. There was no SQL Injection. No Remote Code Execution. No authentication bypass. Just an API endpoint that shoul10
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 11 · 18 min readTryHackMe : The London Bridge writeupSummary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-encoded URL and fetches it server-side - classic SSRF 11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 4 · 7 min readTryHackMe : CryptoCabana WriteupOverview CryptoCabana is a fake crypto-backup service hosted as an Azure Static Website. The attack path chains together four separate misconfigurations: A low-privilege Azure user with only Reader o10
AAAhmed Awad ( NullC0d3 )innullc0d3.hashnode.dev·Jul 28 · 9 min readHunterX: The AI-Powered Offensive Security Platform Redefining Red Teaming, Bug Bounty Hunting, and Penetration TestingTraditional Vulnerability Scanners Are Reaching Their Limits The cybersecurity industry has spent decades improving vulnerability scanners. They became faster. They became capable of sending millions 10
SSunnyincybersecurity-learning.hashnode.dev·Jul 24 · 10 min readTryHackMe Offensive Security Intro Beginner-Friendly Learning GuideIntroduction I recently completed the Offensive Security Intro room on TryHackMe as part of my ongoing cybersecurity learning journey. Offensive security is the practice of thinking like an attacker t00
UBUday Bhaleinhackwithrudraub.hashnode.dev·Jul 22 · 1 min readWelcome to Hack With RudraUB ⭐Welcome to Hack With RudraUB 👋 Welcome to Hack With RudraUB, a place where I document my journey in offensive cybersecurity. This publication is dedicated to sharing: - 🔐 TryHackMe & Hack The Box wr00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 18 · 13 min readFAM CTF: The Library to The Endpoint WriteupExecutive Summary FAM is a mobile CTF challenge distributed as an Android APK (fam-ctf.apk) with four staged flags, each themed around a different layer of the app's Firebase backend: The Library (nat00
